Cisco
300-615 · Question #295
300-615 Question #295: Real Exam Question with Answer & Explanation
The correct answer is A. aaa authentication login default group ISE-TACACS none. By appending none you remove any fallback method, so authentication is attempted only against the ISE-TACACS server group and will fail if the TACACS+ servers are unreachable. The correct command is aaa authentication login default group ISE-TACACS none.
Question
Refer to the exhibit. A Cisco Nexus 9000 Series Switch must be configured to use only TACACS+ servers for default authentication. The engineer notices that the activity fails to run as expected. Which code snippet resolves the issue?
Exhibit
Options
- Aaaa authentication login default group ISE-TACACS none
- Baaa authentication login default group ISE-TACACS
- Caaa authentication login default group ISE-TACACS local
- Daaa authentication login default group ISE-TACACS Local none
Explanation
By appending none you remove any fallback method, so authentication is attempted only against the ISE-TACACS server group and will fail if the TACACS+ servers are unreachable. The correct command is aaa authentication login default group ISE-TACACS none.
Community Discussion
No community discussion yet for this question.